Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Multiple Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsMar 3, 2025 · 20:45 UTC (Mar 3, 2025)2 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20118 CVE-2022-43939 CVE-2022-43769 CVE-2018-8639 CVE-2024-4885

Tags: cve-2023-20118 cve-2022-43939 cve-2022-43769 cve-2018-8639 cve-2024-4885 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-8639	Kernel-mode privilege escalation in Microsoft Windows Win32k	7.8	22%	KEVRansomware	Dec 12, 2018 KEV Mar 3, 2025
CVE-2022-43939 +1 related CVE CVE-2022-43769	Authorization Bypass in Hitachi Vantara Pentaho Business Analytics Server	9.8 group max	92%	KEVPoC	Apr 3, 2023 KEV Mar 3, 2025
CVE-2023-20118	Authenticated Command Injection in Cisco Small Business RV Series Routers	7.2	54%	KEV	Apr 13, 2023 KEV Mar 3, 2025
CVE-2024-4885	Unauthenticated Path Traversal RCE in Progress WhatsUp Gold	9.8	99%	KEV	Jun 25, 2024 KEV Mar 3, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.